feat(tui): sync slash-command autocomplete with the full registry

The /help overlay, command palette, and slash-typeahead all read from
`claurst_tui::app::PROMPT_SLASH_COMMANDS`. That list was hand-
maintained and had drifted: 47 registered non-hidden commands had no
autocomplete entry, and one entry (`/changes`) was orphan (no matching
command anywhere in the codebase).

Changes:
* PROMPT_SLASH_COMMANDS is now `pub` and grows to cover every non-
  hidden command in the registry (accounts, add-dir, branch, btw,
  checkpoints, chrome, color, commit, ctx-viz, desktop, extra-usage,
  files, ide, install-github-app, mobile, passes, permissions, plan,
  pr-comments, privacy-settings, rate-limit-options, release-notes,
  reload-plugins, remote-control, remote-env, revert, sandbox-toggle,
  search, security-review, skills, snapshot, status, statusline,
  stickers, summary, switch, tag, tasks, teleport, terminal-setup,
  think-back, thinkback-play, thinking, undo, usage, version,
  web-setup). Entries are alphabetized.
* Orphan `/changes` removed from the autocomplete list and the help
  category mapping.
* New `prompt_slash_commands_covers_registry` test in claurst-commands
  is the durable safety net: it fails if the autocomplete list and the
  registry drift apart again. The allow-list is documented for
  intentional aliases (quit/settings/survey) and TUI-intercepted
  verbs (handoff).
* test_tab_accepts_slash_suggestion: relaxed pinned name -> asserts
  the UX invariant ("Tab completes /a to a /a* command") so future
  additions to the list don't break the test.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: BunsDev

src-rust/crates/commands/src/lib.rs

@@ -11400,6 +11400,67 @@ mod tests {
         assert!(matches!(result, CommandResult::Error(_)));
     }
 
+    /// The TUI's slash-command autocomplete and `/help` overlay both read
+    /// from `claurst_tui::app::PROMPT_SLASH_COMMANDS`. That list is hand-
+    /// maintained — when a new command is added to the registry but not to
+    /// the list, the TUI silently hides it from autocomplete. This test is
+    /// the safety net.
+    #[test]
+    fn prompt_slash_commands_covers_registry() {
+        use std::collections::HashSet;
+
+        // Names that appear in autocomplete on purpose even though they're
+        // not (or not primarily) registered SlashCommands:
+        //  - quit / settings / survey: user-facing aliases of exit / config /
+        //    feedback.
+        //  - handoff: intercepted directly by the TUI via
+        //    `App::intercept_slash_command_with_args` (sends the current
+        //    session context to a Coven familiar). It is documented in
+        //    docs/familiars.md and lives in tui/src/handoff.rs.
+        const ALLOWED_ALIAS_NAMES: &[&str] = &["quit", "settings", "survey", "handoff"];
+
+        let prompt_names: HashSet<&str> = claurst_tui::app::PROMPT_SLASH_COMMANDS
+            .iter()
+            .map(|(name, _)| *name)
+            .collect();
+
+        // Every non-hidden registered command must show up in autocomplete.
+        let mut missing: Vec<&str> = all_commands()
+            .iter()
+            .filter(|c| !c.hidden())
+            .map(|c| c.name())
+            .filter(|name| !prompt_names.contains(name))
+            .collect();
+        missing.sort();
+        assert!(
+            missing.is_empty(),
+            "PROMPT_SLASH_COMMANDS is missing entries for non-hidden \
+             registered commands: {missing:?}. Add them to \
+             crates/tui/src/app.rs::PROMPT_SLASH_COMMANDS."
+        );
+
+        // No orphans in the prompt list (every entry must either match a
+        // registered command name/alias or be in the allow-list).
+        let known_names_and_aliases: HashSet<&str> = all_commands()
+            .iter()
+            .flat_map(|c| std::iter::once(c.name()).chain(c.aliases()))
+            .collect();
+        let mut orphans: Vec<&str> = prompt_names
+            .iter()
+            .copied()
+            .filter(|name| {
+                !known_names_and_aliases.contains(name) && !ALLOWED_ALIAS_NAMES.contains(name)
+            })
+            .collect();
+        orphans.sort();
+        assert!(
+            orphans.is_empty(),
+            "PROMPT_SLASH_COMMANDS has orphan entries with no matching \
+             command: {orphans:?}. Either register the command or drop \
+             the entry."
+        );
+    }
+
     #[tokio::test]
     async fn test_coven_help_lists_integration_subcommands() {
         let mut ctx = make_ctx();

src-rust/crates/tui/src/app.rs

@@ -45,20 +45,32 @@ use std::io::Stdout;
 use std::sync::{Arc, Mutex};
 use tracing::debug;
 
-const PROMPT_SLASH_COMMANDS: &[(&str, &str)] = &[
-    ("advisor", "Set or unset the server-side advisor model"),
-    (
-        "familiar",
-        "Set your active familiar — changes the TUI mascot live",
-    ),
+/// Pairs of (name, one-line description) shown by the slash-command
+/// autocompletion, /help overlay, and the command palette. Must stay in
+/// sync with the non-hidden entries returned by
+/// `claurst_commands::all_commands()`; the
+/// `prompt_slash_commands_covers_registry` test in `claurst-commands`
+/// enforces that.
+pub const PROMPT_SLASH_COMMANDS: &[(&str, &str)] = &[
+    ("accounts", "List every stored account across providers"),
     (
-        "handoff",
-        "Hand off current session context to a Coven familiar",
+        "add-dir",
+        "Add an extra workspace root to the active session",
     ),
+    ("advisor", "Set or unset the server-side advisor model"),
     ("agent", "List available familiars or show familiar details"),
     ("agents", "Browse familiar definitions and active familiars"),
-    ("changes", "Inspect changes from the current session"),
+    ("branch", "Create or switch session branches"),
+    ("btw", "Send a side-channel note to the model"),
+    ("caveman", "Caveman speech mode — save big token"),
+    ("checkpoints", "Browse session snapshots / restore points"),
+    ("chrome", "Browser automation via Chrome DevTools Protocol"),
     ("clear", "Clear the conversation transcript"),
+    ("color", "Set the prompt bar color for the current session"),
+    (
+        "commit",
+        "Stage and commit changes (model drafts the message)",
+    ),
     ("compact", "Compact the conversation context"),
     ("config", "Open settings"),
     ("connect", "Connect an AI provider"),
@@ -69,18 +81,31 @@ const PROMPT_SLASH_COMMANDS: &[(&str, &str)] = &[
         "coven",
         "Drive the local Coven daemon (sessions, harness runs, rituals)",
     ),
+    ("ctx-viz", "Visualize context-window contents and usage"),
+    ("desktop", "Computer-use desktop control"),
     ("diff", "Inspect the current git diff"),
     ("doctor", "Run diagnostics"),
     ("effort", "Set effort level (low/medium/high/max)"),
     ("exit", "Quit Coven Code"),
     ("export", "Export conversation"),
+    ("extra-usage", "Detailed token usage breakdown"),
+    (
+        "familiar",
+        "Set your active familiar — changes the TUI mascot live",
+    ),
     ("fast", "Toggle fast mode"),
     ("feedback", "Open session feedback survey"),
+    ("files", "List files read or written this session"),
     ("fork", "Fork session into a new branch"),
     ("goal", "Set or view the current session goal"),
+    (
+        "handoff",
+        "Hand off current session context to a Coven familiar",
+    ),
     ("heapdump", "Show process memory and diagnostic information"),
     ("help", "Show help"),
     ("hooks", "Browse configured hooks (read-only)"),
+    ("ide", "Connect to the active IDE integration"),
     (
         "import-config",
         "Import CLAUDE.md and settings.json from ~/.claude",
@@ -90,6 +115,7 @@ const PROMPT_SLASH_COMMANDS: &[(&str, &str)] = &[
         "insights",
         "Generate a session analysis report with conversation statistics",
     ),
+    ("install-github-app", "Install the Coven Code GitHub App"),
     (
         "install-slack-app",
         "Install the Coven Code Slack integration",
@@ -104,32 +130,82 @@ const PROMPT_SLASH_COMMANDS: &[(&str, &str)] = &[
     ),
     ("mcp", "Browse configured MCP servers"),
     ("memory", "Browse and open AGENTS.md memory files"),
+    (
+        "mobile",
+        "Show QR code / links for the mobile companion app",
+    ),
     ("model", "Change the AI model"),
+    ("normal", "Deactivate speech mode"),
     ("output-style", "Toggle output style (auto/stream/verbose)"),
+    ("passes", "Inspect per-turn pass history"),
+    ("permissions", "Manage tool permission rules"),
+    ("plan", "Enter plan mode (read-only)"),
     ("plugin", "Manage plugins (list/info/enable/disable/reload)"),
+    (
+        "pr-comments",
+        "Read or post comments on the active GitHub PR",
+    ),
+    ("privacy-settings", "Open Coven Code privacy settings"),
     ("providers", "List available AI providers and their status"),
-    ("caveman", "Caveman speech mode — save big token"),
-    ("rocky", "Rocky speech mode — amaze amaze amaze"),
-    ("normal", "Deactivate speech mode"),
     ("quit", "Exit Coven Code"),
+    ("rate-limit-options", "Configure rate-limit handling"),
     ("refresh", "Clear saved provider auth and model caches"),
+    ("release-notes", "View Coven Code release notes / changelog"),
+    (
+        "reload-plugins",
+        "Reload the active session plugin registry",
+    ),
+    ("remote-control", "Remote-control session via the bridge"),
+    ("remote-env", "Configure the remote-control environment"),
     ("rename", "Rename this session"),
     ("resume", "Resume a previous session"),
+    ("revert", "Revert a file to its pre-session state"),
     ("review", "Review changes (git diff)"),
     ("rewind", "Rewind to an earlier turn"),
+    ("rocky", "Rocky speech mode — amaze amaze amaze"),
+    ("sandbox-toggle", "Toggle sandboxed shell execution"),
+    ("search", "Search the codebase by natural language or regex"),
+    ("security-review", "Run a security-focused review pass"),
     ("session", "Browse and manage sessions"),
     ("settings", "Open settings"),
     (
         "share",
         "Upload the current session as a secret gist and get a shareable URL",
     ),
+    ("skills", "List and manage skills"),
+    ("snapshot", "Manage filesystem snapshots"),
     ("stats", "Open token and cost stats"),
+    ("status", "Show the current session status"),
+    ("statusline", "Configure the TUI status line"),
+    ("stickers", "Open the Coven Code sticker page"),
+    ("summary", "Generate a session summary"),
     ("survey", "Open session feedback survey"),
+    ("switch", "Switch the active account for a provider"),
+    ("tag", "Tag the current session with a label"),
+    ("tasks", "Manage tracked background tasks"),
+    (
+        "teleport",
+        "Bundle session state for teleporting to another machine",
+    ),
+    (
+        "terminal-setup",
+        "Run the terminal capability detection wizard",
+    ),
     ("theme", "Open the theme picker"),
+    (
+        "think-back",
+        "Show extended-thinking traces from previous responses",
+    ),
+    (
+        "thinkback-play",
+        "Replay a previous thinking trace as a walkthrough",
+    ),
+    ("thinking", "Configure extended thinking for the session"),
     (
         "ultrareview",
         "Run an exhaustive multi-dimensional code review",
     ),
+    ("undo", "Undo a file change made during this session"),
     (
         "update",
         "Check for updates and upgrade to the latest version",
@@ -138,18 +214,19 @@ const PROMPT_SLASH_COMMANDS: &[(&str, &str)] = &[
         "upgrade",
         "Check for updates and upgrade to the latest version",
     ),
+    ("usage", "Detailed per-call token usage breakdown"),
+    ("version", "Display the current Coven Code version"),
     ("vim", "Toggle vim keybindings"),
     ("voice", "Toggle voice input mode"),
+    ("web-setup", "Open the web-setup proxy assistant"),
 ];
 
 fn help_command_category(name: &str) -> &'static str {
     match name {
         "connect" | "model" | "providers" | "refresh" | "fast" | "effort" | "voice" => {
             "Model & Provider"
         }
-        "changes" | "diff" | "review" | "rewind" | "export" | "copy" | "share" | "links" => {
-            "Review & History"
-        }
+        "diff" | "review" | "rewind" | "export" | "copy" | "share" | "links" => "Review & History",
         "stats" | "cost" | "context" | "insights" | "heapdump" | "doctor" => "Diagnostics",
         "config" | "settings" | "theme" | "keybindings" | "hooks" | "mcp" | "import-config" => {
             "Workspace"

src-rust/crates/tui/src/lib.rs

@@ -752,14 +752,22 @@ mod tests {
 
     #[test]
     fn test_tab_accepts_slash_suggestion() {
+        // The first `/a*` suggestion is whichever command comes alphabetically
+        // first in PROMPT_SLASH_COMMANDS. We don't pin a specific name here
+        // because the list grows over time; instead we assert that Tab
+        // completes to *some* `/a*` command — which is the real UX invariant.
         let mut app = make_app();
         app.handle_key_event(key(KeyCode::Char('/')));
         app.handle_key_event(key(KeyCode::Char('a')));
         app.handle_key_event(key(KeyCode::Tab));
 
-        assert_eq!(app.input, "/advisor");
-        assert_eq!(app.prompt_input.text, "/advisor");
-        assert_eq!(app.cursor_pos, "/advisor".len());
+        assert!(
+            app.input.starts_with("/a"),
+            "expected Tab to complete to a /a* command, got {:?}",
+            app.input
+        );
+        assert_eq!(app.input, app.prompt_input.text);
+        assert_eq!(app.cursor_pos, app.input.len());
     }
 
     #[test]